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The clock synchronization problem is to determine the time difference A between two spatially 
separated clocks. When message delivery times between the two clocks is uncertain, 0(2 n ) classical 
messages must be exchanged between the clocks to determine n digits of A. On the other hand, as 
we show, there exists a quantum algorithm to obtain n digits of A while communicating only O(n) 
quantum messages. 
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Clock synchronization is an important problem with 
many practical and scientific applications |l]J^] . Accurate 
timekeeping is at the heart of many modern technolo- 
gies, including navigation, (the global positioning sys- 
tem), electric power generation (synchronization of gen- 
erators feeding into national power grids), and telecom- 
munication (synchronous data transfers, financial trans- 
actions). Scientifically, clock synchronization is key to 
projects such as long baseline interferometry (distributed 
radio telescopes), gravitational wave observation (LIGO), 
tests of the general theory of relativity, and distributed 
computation. 

The basic problem is easily formulated: determine the 
time difference A between two spatially separated clocks, 
using the minimum communication resources. Generally, 
the accuracy to which A can be determined is a function 
of the clock frequency stability, and the uncertainty in the 
delivery times for messages sent between the two clocks. 
Given the stability of present clocks, and assuming re- 
alistic bounded uncertainties in the delivery times (e.g. 
satellite to ground transmission delays), protocols have 
been developed which presently allow determination of 
A to accuracies better than 100 ns (even for clock sepa- 
rations greater than 8000 km); it is also predicted that 
accuracies of 100 ps should be achievable in the near fu- 
ture. 

However, these protocols fail if the message delivery 
time is too uncertain, because they rely upon the law of 
large numbers to achieve a constant average delivery time 
(thus, also requiring 0(2 2n ) messages to obtain n digits 
of A). If the required averaging time is longer than the 
stability time of the local clocks, then these protocols 
must be replaced. A simple, different, protocol, which 
succeeds independent of the delivery time, is to just send 
a clock which keeps track of the delivery time. For exam- 
ple, if Alice mails Bob a wristwatch synchronized to her 
clock, then when Bob receives it he can clearly calculate 
the A for their two clocks from the difference between 



his time and that given by the wristwatch. 

This wristwatch protocol is generally impractical, but 
it suggests another scheme which is intriguing. A quan- 
tum bit (qubit) behaves naturally much like a small clock. 
For example, a nuclear spin in a magnetic field precesses 
at a frequency given by its gyromagnetic ratio times the 
magnetic field strength. And an optical qubit, repre- 
sented by the the presence or absence of a single photon 
in a given mode, oscillates at the frequency of the electro- 
magnetic carrier. The relative phase between the |0) and 
|1) states of a qubit thus keeps time, much like a clock, 
and ticks away during transit. Unlike a classical clock, 
however, this phase information is lost after measure- 
ment, since projection causes the qubit to collapse onto 
either |0) or |1), so repeated measurements and many 
qubits are necessary to determine A. On the other hand, 
with present technology it is practical to communicate 
qubits over long distances through fibers , and even 
in free space ||. 

Here, we study this "ticking qubit" protocol for clock 
synchronization, and establish an upper bound on the 
number of qubits which must be transmitted in order to 
determine A to a given accuracy. Surprisingly, we find 
that only 0(n) qubits are needed to obtain n bits of A, 
if we have the freedom of sending qubits which tick at 
different frequencies. We begin by describing a formal 
model for this protocol, then the algorithm is presented. 
Various generalizations and limitations are discussed in 
the conclusion. 

Let t a and t b be the local times on Alice and Bob's re- 
spective clocks. We may assume for now, for the sake of 
simplicity, that their clocks operate at exactly the same 
frequency and are perfectly stable. Their goal is to deter- 
mine the difference A = t b —t a , which is initially unknown 
to either of them. The goal can be accomplished using 
the following primitive: 
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Protocol: Ticking qubit handshake TQH(w, 

1: At time i", Alice sends (ij, \ip),uj) to Bob. oj spec- 
ifies the tick rate of the qubit 

2: Bob receives (t1,e iujtl2Z \^),uj) at time t b 2 , where 
ti2 is the time the qubit spent in transit. 

3: Bob applies the operation Ci 2 = Ie" ,u ( t ^ i i' z 
to the qubit, obtaining Xe~ iujZA \il)) . 

4: At time 4 Bob sends {t\, Xe- iu)ZA \ip), w) to Al- 
ice. 

5: Alice receives {t\, e wt ^ z Xe~ wAZ \ili) , to) at time 
£5, where £45 is the time the qubit spent in transit. 

6: Alice applies the operation C 45 = Xe^ lu ^^ tb ^ z 
to the qubit, obtaining e~ 2wZA \^) . 

We use notation for quantum states and their trans- 
forms that is standard in the quantum computation and 
quantum information community; for an excellent re- 
view, see ||. This can be summarized as follows. \ip) 
is the state of a qubit, which can be expressed as a two- 
component unit vector 
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where Co and c\ are complex numbers satisfying |co| + 
J - 1. When measured, a results, projecting the 

2 - the corre- 
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qubit into the state |0) with probability |co| 
sponding happens for 1.. Operations on qubits are uni- 
tary transformations U which are matrices that satisfy 
U'U = I, being the complex-conjugate transpose of 
U and / the identity matrix. For single qubits, any 2x2 
unitary transform may be written a rotation operator, 



Ja+i9(n 3; X+n y Y+n z Z)/2 



(2) 



where a specifies a (usually irrelevant) global phase, X, 
Y , and Z are the usual Pauli matrices, 
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. (3) 



n = [n x , n y , n z ] T is a unit real-component vector, and 9 is 
the rotation angle. Note that X, Y, and Z themselves are 
valid unitary operators; simple operations such as these 
are often called quantum logic gates, and cascading them 
gives a quantum circuit. 

The six stages of the TQH(w, \ip)) protocol work in 
the following ways, u) and \rp) are inputs, as described 
in Step 1; we will show below how they can be set use- 
fully. Step 2 follows from the the time-evolution of the 
qubit during transit. A quantum state evolves in time 
according to the Schrodinger equation 



ih- 



(4) 



where Tt is the (time-independent) Hamiltonian describ- 
ing the physical configuration of the system. For exam- 
ple, a spin-1/2 particle such as an electron or proton in a 
magnetic field B has the Hamiltonian TL = TiljZ , where 
Hlu is the energy difference between the state of the spin 
aligned and anti-aligned with B. Many other quantum 
systems, such as a single photon propagating in space, 
can have a Hamiltonian of this mathematical form. Plug- 
ging this H into the solution to the Schrodinger equation, 



ivc*)> = j m/H m = q)) , 



(5) 



gives e 



after the elapsed time ti2- Step 3 is true 



because t = t a 



A, and t 12 = t% - t\ = t b 2 - - A, 
so C^e^* 12 ^) = e~ iujZA \ip). During the time Bob has 
the qubit, we assume he's turned off its evolution, so that 
although t\ may not equal t\, the qubit does not expe- 
rience any relative phase shift during that time interval. 
Step 6 follows because t i5 — — t\ = tg — t\ + A, and 
Xe X — e~ 10Z . Summarizing, the net effect of this 
protocol is to allow Alice to transform a qubit into 
e- 2iuZA \ip). 

A simple, but inefficient, algorithm which allows Alice 
to determine A uses repeated execution of the ticking 
qubit handshake. She prepares \tp) = (|0) + |l))/\/2, ex- 
ecutes TQH(lj, |^)), and obtains 
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She then applies a Hadamard transformation 



H 



to \ip'}, getting 
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such that when she measures the state, a results with 
probability cos 2 (2o;A). By the law of large numbers, with 
high probability, 2 2n repetitions of this procedure allows 
Alice to estimate n bits of cos 2 (2wA), and thus, of wA. 
If bounds on the size of A are known in advance, u> can 
be chosen wisely to allow A to be determined; otherwise, 
a few iterations of this procedure with different u) suffice 
to initially bound A. 

This repetition procedure is inefficient because it re- 
quires an a number of repetitions exponential in the num- 
ber of desired digits. It is essentially a classical technique, 
and is very similar in structure to the usual procedure 
employed in metrology, Ramsey interferometry Q. The 
preparation of |^>) can be accomplished by applying a 
Hadamard transformation to |0); this corresponds to the 
first pulse in the Ramsey scheme. Note, incidentally, that 
in practice, Hadamard transforms can be replaced with 
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simple 7r/2 pulses (operations such as e l7rY / 4 ), although 
their introduction here is convenient. The TQH step 
corresponds to the free evolution period. And the final 
Hadamard is the second pulse in Ramsey sequence. It is 
thus not surprising that repetition is inefficient, since it 
has the same resource requirements as in Ramsey inter- 
ferometry. 

A much better algorithm, which allows Alice to deter- 
mine n bits of A using only 0(n) repetitions of the ticking 
qubit handshake, is the following. Alice starts with m + 1 
qubits initialized to |<^o) = 1 0) 1 0) , where the decimal base 
label on the left denotes the m qubit state, and the label 
on the right, the extra ancillary single qubit. She then 
applies m Hadamard gates to the m qubits, obtaining 
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The first register is now in an equal superposition over 
all possible states of the m qubits. Next, Alice applies a 
unitary operation T which does 



T|fc)|0) = |fe)e 



2-7T iku A 



|o>. 



(10) 



This is a nontrivial operation, but assume for now that 
this is possible and below, we'll show how this is accom- 
plished. Applying T to \<f>\) gives 
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Next, Alice applies an inverse quantum Fourier transform 
F^ 1 , which does 



F-i\k) = 



1 



E e " 
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This operation requires only 0(n 2 ) elementary one and 
two-qubit gates || (in contrast to the classical fast 
Fourier transform, which requires 0(n2 n ) gates to trans- 
form an n element vector). This produces the state 
(dropping the final |0), which is now unimportant) 
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(13) 



\cj\ 2 is clearly peaked around j = 2 m wA. If 2 m wA is an 
integer, then this equality holds, \cj\ 2 = 5j,uA, and mea- 
suring the first m qubits gives uA exactly. Otherwise, 
it can be shown that if m = n + |~log(2 + l/2e)~|, then 
measuring the m qubits gives luA to n bits of accuracy, 
with probability of success at least 1 — e [B 10 1. 

What we have used in this algorithm is the well-known 
ability of quantum computation to efficiently determine 



the eigenvalue of a unitary operator, for a given eigen- 
state, using a routine known as quantum phase estimation 
P,H . It is possible to use this subroutine in the present 
application, clock synchronization, because there can be 
an efficient implementation of the operator T. 

Alice can implement T using m calls to TQH. One 
call is made for each of the m qubits, so we can under- 
stand how this works by considering what happens for 
the £th qubit. Let co|0) + c\ |1) be the state of this qubit, 
so that we start with the two-qubit state 



(co|0)+ Cl |l»|0). 

Now apply a controlled-NOT gate |lJ 
is described by the unitary matrix 



10 
10 
1 
10 



(14) 

whose transform 



(15) 



with the control qubit being the first one. The result is 

co|00) + Cl |ll). (16) 

Note how the two qubits are now entangled — this is 
partially reflected by the fact that if a measurement were 
performed at this moment on one qubit, the result would 
completely determine the state of the other qubit. Let 
represent the state of the second qubit; Alice sends this to 
Bob, performing TQH(— 7r2 £ ^ 1 w, \ip)), Upon completion 
of that procedure, she is left with the state 
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She then performs a second controlled-NOT gate, again 
with the first qubit as the control, obtaining 
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(18) 



global phase is unobservable, and thus irrele- 



vant to the present calculation and can be dropped. The 
overall operation Ti accomplished on this i'th qubit can 
thus be expressed as 



li|fc/)|0) 



J2 TzikiujA 



10) 



(19) 



where \kg) represents the £th qubit. Now, the over- 
all state \k) of the m qubits can be written as \k) — 
\ko)\h) ■ ■ ■ |fc m _i), so applying T = T Ti ■ ■ ■ T m _i gives 

T|fe)|0) = [Tolfco)^) ■••T ro _ 1 |fc m _i)l |0) 



\k)e 



^ Ke >\0). (20) 



Since 2 kt = k, this construction gives the desired 
transformation, Eq.(10). Note that the m calls to TQH 
can be performed sequentially (as shown in Figure [l]), 
or, by using m ancilla qubits initialized to |0), in paral- 
lel, since the algorithm leaves them unchanged. 
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FIG. 1. Quantum circuit describing the exponentially fast 
clock synchronization algorithm. The boxed 2 gates rep- 
resent calls to TQH(— ■k2 1 ~ 1 uj, \ip}); otherwise, the notation 
used is standard pi] . Time goes from left to right, and meters 
denote projective measurement. 

The main caveat to this result is that the tick rate of 
the qubit sent to Bob must span an exponentially 
large range, from ~ 1/2A to ~ 2 m /A. If the qubit 
transmitted in the TQH routine is physically realized 
by a spin in a magnetic field, this means that there must 
be "dial settings" for the magnetic field strength which 
span an exponentially large range. Similarly, if the qubit 
is represented by a single photon, its carrier must span 
an exponentially large frequency range. Most critically 
of all, the stability of the tick rate must be adequate; 
fluctuations of the magnetic field or index of refraction 
should be controlled to cause less than roughly a half- 
wavelength phase shift. 

On the other hand, in principle, if it is possible to use a 
nonlinear optical medium to transport photons between 
Alice and Bob, then collective photon states whose ef- 
fective wavelengths can be exponentially short could 
be used to represent qubits. Furthermore, the shortest 
wavelength required by the protocol corresponds to the 
inverse of the accuracy to which A is desired; this means 
that optical wavelengths roughly correspond to accura- 
cies of fractions of femptoseconds. Time transfer using 
ground to satellite laser links is under development jl3) , 
and photons of other wavelengths, ranging from kilome- 
ters to millimeters, arc also experimentally feasible. The 
quantum Fourier transform used in the quantum clock 
synchronization algorithm is also known to be relatively 
stable to perturbations ]m| , and the entire procedure can 
be further stabilized by using quantum error correction 
techniques |l5| - [l8| . 

The quantum algorithm we have described allows two 
clocks to be synchronized, independent of the uncertain- 
ties in message transport time between the clocks, so long 
as messages are delivered within than the local stability 
time of the clocks. In its simplest instance, 2 2n "tick- 
ing qubit" communication steps are required to obtain 
the time difference A to 0(n) bits of accuracy. Aside 
from exponential time, this does not require any demand- 
ing physical resources - just the ability to communicate 



qubits. In the advanced form of the algorithm, only n 
"ticking qubit" communication steps are required to ob- 
tain 0(n) bits of A, but this procedure requires expo- 
nentially demanding physical resources. These results 
invite further consideration of the problem of clock syn- 
chronization with the assistance of quantum resources. 
For example, it is straightforward to simplify the present 
protocols to use only one-way communication and no dis- 
tributed entanglement (these results will be reported in 
detail elsewhere) . It may also be possible to utilize quan- 
tum teleportation [ |l9[ in a nontrivial manner, but that 
must be done carefully, since changing the physical form 
of the qubits usually changes their tick rate; moreover, 
the two classical bits sent in the teleportation do not 
tick, and this is not apparently compensated by having 
an EPR pair around. 

We thank Daniel Gottesman and David DiVincenzo 
for helpful discussions. 
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